Outt
Sett
Behavioral task
behavioral1
Sample
71c19c52311b9919986d149f1199e11c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
71c19c52311b9919986d149f1199e11c_JaffaCakes118
Size
49KB
MD5
71c19c52311b9919986d149f1199e11c
SHA1
3238a2c087e294343845be5c687c303b4af74205
SHA256
2e85707159c3a409986cc22c9b36ec438ed930b3915a85f26067430c823c5c1f
SHA512
ef660139036bf3eb153f7e74166fcacac4a5e9258f74b03b99957dc33525fc558ab03215ba2fb7c0307b9b1fbb248c4d395f244b7ff0f59e2881cce733700327
SSDEEP
1536:APqmOCbgVb5VtG/6QmVSFWnVPdiZO/19U1:cqmAVVVt86Q0QiVPkAG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71c19c52311b9919986d149f1199e11c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ